feat: "Link Dataset/Dataverse" permission

[vera]

What this PR does / why we need it:

Linking or unlinking a dataset or dataverse now requires the new "Link Dataset/Dataverse" permission.
Previously, this action was covered by the "Publish Dataset/Dataverse" permission.
Linking and publishing permissions can now be granted separately, allowing for more fine-grained access control.

Which issue(s) this PR closes:

/

Special notes for your reviewer:

/

Suggestions on how to test this:

I've extended an existing test which can be run with mvn test -Dtest="DatasetsIT#testCreateDeleteDatasetLink" to check that datasets cannot be linked/unlinked unless you have the curator role, which has been altered to include the new link permissions.

Does this PR introduce a user interface change? If mockups are available, please link/include them here:

/

Is there a release notes update needed for this change?:

I've added a short release note.

Additional documentation:

/

[ofahimIQSS]

tests are passing, looks good to me - merging.

[pdurbin]

We need to revert this. Here's the PR to do so:

• Revert "feat: "Link Dataset/Dataverse" permission" #11682

[pdurbin]

@vera as mentioned above, we had to revert this PR. As written, it breaks existing databases.

I assume you're still interested in this functionality. Would you be able to create a new PR (and an issue first, if you don't mind) that includes a Flyway script like the one in #8174 that updates the database with new permission bits.

This: https://github.com/GlobalDataverseCommunityConsortium/dataverse/blob/6c609c408e483e3e510a15413c60cade9276b60d/src/main/resources/db/migration/V5.8.0.1__8109-add-manage-files-permission.sql

That way, existing databases will get the updated permission bits, thanks to the Flyway script. We can help with the Flyway script if you need it!

[pdurbin]

@vera created a follow up issue here (thanks!):

• Feature Request: Separate "link" permission from "publish" permission #11690

[vera]

I've resubmitted the PR with a Flyway migration script here: #11691

Sorry, I don't know how I missed the big comment in Permissions.java. Now I know better for next time. 😄

[pdurbin]

@vera thanks! Don't worry, a number of us missed it! Thanks for the new PR! ❤️